Mapping EntraID groups to Authentik groups

[smarcucciohal]

I've already (perhaps prematurely) created an Issue for this:
#16451

With the community edition, are you supposed to be able to return a list of group names in a User Property Mapping and have Authentik add the user to those groups if they exist?

I'm returning a list of the group names (not Ids)

"groups": ['Group 1', 'Group 2', 'Group 3']

I'm getting an general exception when it does a look up in an internal dictionary.

[smarcucciohal]

Follow up... using the Generic OAuth Source served as a work around. Any groups returned from the Property Mapping were properly created in Authentik and the user was added to the groups.

[dewi-tik]

If you follow the Entra ID source guide, without any property mappings in place, all the groups that an Entra ID user is a member of should be synced to authentik and the user added as a member.

Are you seeing different behavior without property mappings in place?